Razormist

Records76All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

Razormist records in CISA KEV

No Razormist vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Discussion Forum Site 16 records HIGH Loan Management System 11 records HIGH Employee Management System 9 records HIGH Online Polling System 7 records HIGH Student Result Management System 6 records HIGH Simple Membership System 5 records HIGH Basic Library System 3 records LOW Phone Contact Manager System 3 records MEDIUM

Records

16 records in Online Discussion Forum Site · all components

TI-2024-02505 CVE-2024-2690 · GHSA-9p5f-8c7x-7c7j

SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload

HIGH 75

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01046 Published 2024-03-20 No fix listed CWE-434

TI-2023-02954 CVE-2023-3152 · GHSA-hg4r-gx6g-m7fr

SourceCodester Online Discussion Forum Site view_post.php sql injection

HIGH 71

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00839 Published 2023-06-07 No fix listed CWE-89

TI-2023-02949 CVE-2023-3147 · GHSA-ccf8-hcrh-rjp9

SourceCodester Online Discussion Forum Site view_category.php sql injection

HIGH 71

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-06-07 No fix listed CWE-89

TI-2023-02948 CVE-2023-3146 · GHSA-wxfq-263r-9c3q

SourceCodester Online Discussion Forum Site manage_category.php sql injection

HIGH 71

A vulnerability, which was classified as critical, was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00751 Published 2023-06-07 No fix listed CWE-89

TI-2024-04576 CVE-2024-4920 · GHSA-q7q5-hvh8-gjh4

SourceCodester Online Discussion Forum Site registerH.php unrestricted upload

HIGH 70

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00829 Published 2024-05-16 No fix listed CWE-434

TI-2023-02951 CVE-2023-3149 · GHSA-3hgc-3p3q-4m9q

SourceCodester Online Discussion Forum Site manage_user.php sql injection

MEDIUM 40

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00838 Published 2023-06-07 No fix listed CWE-89

TI-2023-02953 CVE-2023-3151 · GHSA-f4j6-v552-hrxp

SourceCodester Online Discussion Forum Site manage_user.php sql injection

LOW 39

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-06-07 No fix listed CWE-89

TI-2023-02952 CVE-2023-3150 · GHSA-7h94-7rrv-j8jq

SourceCodester Online Discussion Forum Site manage_post.php sql injection

LOW 39

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00751 Published 2023-06-07 No fix listed CWE-89

TI-2023-02950 CVE-2023-3148 · GHSA-mmv2-7ch7-7c5g

SourceCodester Online Discussion Forum Site manage_post.php sql injection

LOW 39

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-06-07 No fix listed CWE-89

TI-2023-02947 CVE-2023-3145 · GHSA-rjv8-5r7g-7j9g

SourceCodester Online Discussion Forum Site sql injection

LOW 39

A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-06-07 No fix listed CWE-89

TI-2022-13311 CVE-2022-31295 · GHSA-j4gw-rr47-472j

An issue in the delete_post() function of Online Discussion Forum Site 1 allows…

LOW 36

An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01422 Published 2022-06-16 No fix listed CWE-639

TI-2022-13738 CVE-2022-31911 · GHSA-6v97-xhgj-94ff

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.

LOW 34

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-06-16 No fix listed CWE-89

TI-2022-13310 CVE-2022-31294 · GHSA-rc77-5c9x-xqgg

An issue in the save_users() function of Online Discussion Forum Site 1 allows…

LOW 30

An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00865 Published 2022-06-16 No fix listed CWE-352

TI-2023-02946 CVE-2023-3144 · GHSA-4qrv-c52g-rjr6

SourceCodester Online Discussion Forum Site manage_post.php cross site scripting

LOW 25

A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00636 Published 2023-06-07 No fix listed CWE-79

TI-2023-02945 CVE-2023-3143 · GHSA-jw67-h578-772q

SourceCodester Online Discussion Forum Site manage_post.php cross site scripting

LOW 25

A vulnerability classified as problematic has been found in SourceCodester Online Discussion Forum Site 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00612 Published 2023-06-07 No fix listed CWE-79

TI-2022-13740 CVE-2022-31913 · GHSA-q4cm-862w-32h8

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via…

LOW 23

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0051 Published 2022-06-16 No fix listed CWE-79

Open these records in search →